$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft File: 958f499ac41f5f1d49e25d2caab8318b95a1c691.mft (raw, json) Hash identifier: cb9d00VVure2shuvX5cLtC2/0RNfKblFGJrOpLF0Smc= Subject key identifier: 21:13:83:9A:37:F5:FC:D7:9C:51:C9:F3:9A:22:6D:DB:9B:4D:21:3B Authority key identifier: F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77 Certificate issuer: /CN=958f499ac41f5f1d49e25d2caab8318b95a1c691 Certificate serial: 260640 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft Manifest number: 0DE6 Signing time: Fri 29 Mar 2024 06:20:23 +0000 Manifest this update: Fri 29 Mar 2024 05:20:07 +0000 Manifest next update: Mon 01 Apr 2024 07:33:07 +0000 Files and hashes: 1: 958f499ac41f5f1d49e25d2caab8318b95a1c691.crl (hash: TjD1UfGqfok5jANnsJkZcxTo2kBcdJF2cKt6i2QidEc=) 2: 9fc4ad5ba19c40e5d84a921b6256e8739d2bd5ac.roa (hash: n9WbVfOITWE++kJvGPCQSDWZMl5nB2sfZoVDMfo9gxU=) 3: eb2ef20d6c99f35020c66900893f8f05be952bb7.roa (hash: K2fZEPPNBTW8FkNLsti14QwIaftnrWMDKz6pjx2Q3F0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.crl rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491968 (0x260640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958f499ac41f5f1d49e25d2caab8318b95a1c691 Validity Not Before: Mar 29 05:20:07 2024 GMT Not After : Apr 1 07:33:07 2024 GMT Subject: CN=8025ccbd858e94d31402ac668f16d98b9617a9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1f:af:62:1d:89:97:cb:4d:2d:9e:c1:74:74: 65:3c:e1:25:74:5f:a5:e4:7a:19:f2:95:12:20:6f: 5b:49:ab:99:88:19:c9:9b:7a:e9:cd:3f:ae:63:6a: f1:b8:f8:c0:ab:07:ce:00:75:2c:ba:c7:64:f1:be: dc:39:51:87:9b:4f:93:83:65:7a:dc:6c:a3:60:ce: aa:27:6d:65:46:41:9b:6a:ef:8f:da:4a:44:9e:34: bb:32:bf:f4:51:ba:fd:cf:5f:ac:45:6c:9f:0d:aa: 3f:e1:90:77:47:df:97:f0:00:31:38:11:83:c1:16: 2b:bb:a5:f3:d8:43:1e:23:d8:b8:b9:bb:7a:d8:ea: 8b:7f:60:68:43:ee:c9:c8:6c:b8:7b:da:b2:da:da: 51:9a:c6:60:8d:f4:4b:0a:8e:e7:7c:9e:86:a9:2c: 9b:28:b7:a1:ae:55:f5:83:7d:3b:c6:6d:69:9d:f3: d9:bb:d8:37:fb:29:d9:e5:aa:65:18:9c:cb:c5:b2: 46:59:90:58:9b:4a:44:52:d5:c1:4d:e7:9b:31:37: 26:fc:8e:f8:0d:8e:c6:04:c4:94:66:00:db:8c:62: 84:8e:ff:9e:84:29:e3:83:9a:9a:e0:a6:4d:8f:96: 78:33:85:1e:92:b2:4e:78:1b:87:c0:f5:71:d8:62: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:13:83:9A:37:F5:FC:D7:9C:51:C9:F3:9A:22:6D:DB:9B:4D:21:3B X509v3 Authority Key Identifier: keyid:F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ad:0d:b3:d3:cf:9e:98:73:31:2d:57:5f:d2:35:59:6b:14: bc:cd:85:72:29:04:54:fd:4b:5d:cc:11:09:1f:f7:39:a7:34: c9:cf:4c:ef:cb:79:c1:38:58:2f:4a:96:29:64:d8:cf:20:45: f3:00:ee:7f:c8:1a:3e:65:21:1c:a4:5f:5d:92:e4:cc:bd:92: 0d:20:e2:bb:49:14:08:27:8e:b7:4a:f4:50:87:46:bb:f7:a4: 1e:d6:71:63:ef:ef:2e:a6:86:08:d6:b2:80:01:5f:f1:65:e3: a0:06:58:69:83:4f:69:79:8e:fa:ba:e8:f2:3f:b8:f0:27:f1: fc:4f:99:45:4f:12:c7:13:82:84:1c:81:b2:e8:c2:2c:18:1a: 72:1e:df:43:f2:61:b6:77:94:09:4d:f1:b6:30:ac:4e:d7:7d: f5:50:f7:12:f9:ce:9b:9e:1a:a1:a3:0a:82:8d:51:f3:3b:93: ed:5d:86:b2:49:29:28:dc:29:3b:36:c6:05:5f:3b:26:c8:87: f6:91:cd:55:3f:47:f8:d5:a3:e8:81:cf:f7:d3:28:e1:c2:82: 05:ef:45:77:f8:57:20:4d:59:05:f2:62:8c:89:54:ce:10:bc: 2e:70:dc:a3:f6:56:98:40:96:70:1c:3f:e8:02:62:42:a5:67: 83:0c:22:f0 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJgZAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1 OGY0OTlhYzQxZjVmMWQ0OWUyNWQyY2FhYjgzMThiOTVhMWM2OTEwHhcNMjQwMzI5 MDUyMDA3WhcNMjQwNDAxMDczMzA3WjAzMTEwLwYDVQQDEyg4MDI1Y2NiZDg1OGU5 NGQzMTQwMmFjNjY4ZjE2ZDk4Yjk2MTdhOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAkB+vYh2Jl8tNLZ7BdHRlPOEldF+l5HoZ8pUSIG9bSauZiBnJ m3rpzT+uY2rxuPjAqwfOAHUsusdk8b7cOVGHm0+Tg2V63GyjYM6qJ21lRkGbau+P 2kpEnjS7Mr/0Ubr9z1+sRWyfDao/4ZB3R9+X8AAxOBGDwRYru6Xz2EMeI9i4ubt6 2OqLf2BoQ+7JyGy4e9qy2tpRmsZgjfRLCo7nfJ6GqSybKLehrlX1g307xm1pnfPZ u9g3+ynZ5aplGJzLxbJGWZBYm0pEUtXBTeebMTcm/I74DY7GBMSUZgDbjGKEjv+e hCnjg5qa4KZNj5Z4M4UekrJOeBuHwPVx2GID6QIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFCETg5o39fzXnFHJ85oibdubTSE7MB8GA1UdIwQYMBaAFPX7cHklRyoAlw9p HVTbe9jqXn13MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTU4ZjQ5 OWFjNDFmNWYxZDQ5ZTI1ZDJjYWFiODMxOGI5NWExYzY5MS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYzE2MTgwMmEtNzhjNS00NTg4LWFhZmYtMWM4M2Uw ZmQ3NzM5Lzk1OGY0OTlhYzQxZjVmMWQ0OWUyNWQyY2FhYjgzMThiOTVhMWM2OTEu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9jMTYxODAyYS03OGM1LTQ1ODgtYWFmZi0xYzgz ZTBmZDc3MzkvOTU4ZjQ5OWFjNDFmNWYxZDQ5ZTI1ZDJjYWFiODMxOGI5NWExYzY5 MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAB2tDbPTz56YczEtV1/SNVlrFLzNhXIpBFT9S13MEQkf9zmn NMnPTO/LecE4WC9Klilk2M8gRfMA7n/IGj5lIRykX12S5My9kg0g4rtJFAgnjrdK 9FCHRrv3pB7WcWPv7y6mhgjWsoABX/Fl46AGWGmDT2l5jvq66PI/uPAn8fxPmUVP EscTgoQcgbLowiwYGnIe30PyYbZ3lAlN8bYwrE7XffVQ9xL5zpueGqGjCoKNUfM7 k+1dhrJJKSjcKTs2xgVfOybIh/aRzVU/R/jVo+iBz/fTKOHCggXvRXf4VyBNWQXy YoyJVM4QvC5w3KP2VphAlnAcP+gCYkKlZ4MMIvA= -----END CERTIFICATE-----Generated at Fri Mar 29 07:31:01 2024 by rpki-client on console-fra.rpki-client.org